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CLAIMS: 



1 . A method for preventing unwanted use of digital data (D 1 , D2; D 1 1 D2'), 

which digital data (Dl, D2; Dl 1 D2 1 ) is available in encoded form, which digital data (Dl, 
D2; Dl f D2 ! ) is made accessible by a data-source device (4) to a data-sink device (3) and 
which digital data (Dl, D2; Dl' D2 1 ) has associated with it blocking information (BL1, BL2; 

5 BL1\ BL2 f ) by means of which any making available of the digital data (Dl , D2; Dl' D2') by 
the data-sink device (3) to a further data-sink device can be blocked, which method 
comprises the method steps specified below, namely, making available of authorization-to- 
use information (BBI1, BBI2; BBIl 1 , BBI2') to a data-sink device (3), which authorization- 
to-use information (BBI1, BBI2; BBIl', BBI2 1 ) is made available separately from the digital 

10 data (Dl, D2; Dl 1 D2'), is intended for authorizing the use of the digital data (Dl, D2; Dl" 
D2 ! ) by the data-sink device (3) and comprises at least the blocking information (BL1, BL2; 
BL1 1 , BL2 1 ) plus decoding information (DC1, DC2; DC1' DC2 1 ), which decoding information 
(DC1, DC2; DCT DC2 1 ) is associated with the digital data (Dl, D2; DV D2 1 ), with which 
decoding information (DC1, DC2; DC1' DC2') the digital data (Dl, D2; Dl" D2 f ) can be 

15 decoded, and which decoding information (DC1 , DC2; DC1 ! DC2 1 ) is available to the data- 
source device (4) before the authorization-to-use information (BBI1, BBI2; BBIl 1 , BBI2 1 ) is 
made available to the data-sink device (3), and withdrawal of the availability of the decoding 
information (DC1, DC2; DC1 1 DC2 1 ) to the data-source device (4). 

20 2. A method as claimed in claim 1, wherein the withdrawal of the availability of 

the decoding information (DC1, DC2; DC1' DC2 1 ) to the data-source device (4) is performed 
by deleting the decoding information (DC1, DC2; DC1 1 DC2 1 ) available to the data-source 
device (3). 

25 3. A method as claimed in claim 1 , wherein note is also taken of data-sink 

information (SO) by means of which the data-sink device (3) can be identified. 

4. A method as claimed in claim 1, wherein the making available of the 

authorization-to-use information (BBIl, BBI2; BBir, BBI2 1 ) to the data-sink device (3) and 
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the withdrawal of the availability of the decoding information (DC1, DC2; DC1 1 , DC2') to 
the data-source device (4) is able to be instigated, as a function of first relationship 
information (Rll) by means of which the relationship between a user (7) of the data-source 
device (4) and a user (6) of the data-sink device (3) can be defined, either only by the user (7) 
5 of the data-source device (4) or by the user (6) of the data-sink device (3) as well. 

5. A method as claimed in claim 1, wherein termination of the making available 
of the digital data (Dl, D2; T>V D2') to the data-sink device (3) comprises firstly the making 
available to the data-source device (4) of the decoding information (DC1, DC2; DC1 1 DC2') 

10 that was previously made available to the data-sink device (3) and secondly the withdrawal of 
the availability of the decoding information (DC1, DC2; DC1' DC2 1 ) to the data-sink device 
(3). 

6. A method as claimed in claim 5, wherein the termination of the availability of 
15 the digital data (Dl, D2; Dl' D2') to a data-sink device (3) is performed, as a function of 

second relationship information (RI2) by means of which a relationship between a user (7) of 
the data-source device (4) and a user (6) of the data-sink device (3) can be defined, either 
only by the user (6) of the data-sink device (3) or by the user (7) of the data-source device (4) 
as well. 

20 

7. A device (2) for preventing unwanted use of digital data (Dl, D2; Dl' D2*), 
which digital data (Dl, D2; Dl' D2') is available in encoded form, which digital data (Dl, 
D2; Dl f D2 ? ) can be made accessible by a data-source device (4) to a data-sink device (3) and 
which digital data (Dl, D2; Dl f D2 ! ) has associated with it blocking information (BL1, BL2; 

25 BL1 1 , BL2 ? ) by means of which any making available of the digital data (Dl, D2; Dl' D2') by 
the data-sink device (3) to a further data-sink device can be blocked, wherein management 
means (9) are provided, which management means (9) are arranged to make available 
authorization-to-use information (BBI1, BBI2; BBI1\ BBI2') to a data-sink device (3), which 
authorization-to-use information (BBI1, BBI2; BBIl', BBI2 1 ) exists separately from the 

30 digital data (Dl, D2; Dl' D2'), is intended for authorizing the use of the digital data (Dl, D2; 
Dl 1 D2') by the data-sink device (3) and comprises at least the blocking information (BL1, 
BL2; BLT, BL2 1 ) plus decoding information (DC1, DC2; DC1' DC2'), which decoding 
information (DC1, DC2; DC1' DC2 1 ) is associated with the digital data (Dl, D2; Dl 1 D2'), 
with which decoding information (DC1, DC2; DC1' DC2') the digital data (Dl, D2; Dl' D2') 
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can be decoded, and which decoding information (DC1, DC2; DCV DC2 1 ) is available to the 
data-source device (4) before the authorization-to-use information (BBI1, BBI2; BBir, 
BBI2 1 ) is made available to the data-sink device (3), and wherein the management means (9) 
are arranged to withdraw the availability of the decoding information (DC1, DC2; DCV 
5 DC2 1 ) to the data-source device (4). 

8. A device (2) as claimed in claim 7, wherein, for withdrawing the availability 
of the decoding information (DC1, DC2; DC1 1 DC2') to the data-source device (4), the 
management means (9) are arranged to delete the decoding information (DC1, DC2; DCl f 

10 DC2 1 ) available to the data-source device (4). 

9. A device (2) as claimed in claim 7, wherein the management means (9) are, in 
addition, arranged to take note of data-sink information (SO) for the data-source device (4) 
by means of which the data-sink device (3) can be identified. 

15 

10. A device (2) as claimed in claim 7, wherein the management means (9) are, in 
addition, arranged to take account of first relationship information (RI1) by means of which a 
relationship between a user (7) of the data-source device (4) and a user of the data-sink 
device (3) can be defined, and wherein the management means (9) are arranged, as a function 

20 of the relationship defined by the first relationship information (RI1), to enable the making 
available of the authorization-to-use information (BBI1, BBI2; BBIl 1 , BBI2') to the data-sink 
device (3) and the withdrawal of the availability of the decoding information (DC1, DC2; 
DCV DC2 1 ) to the data-source device (4) to take place either onV at the instigation of the 
user (7) of the data-source device (4) or at the instigation of the user (6) of the data-sink 

25 device (3) as well. 

11. A device (2) as claimed in claim 7, wherein, for termination of the availability 
of the digital data (Dl, D2; Dl 1 D2') to the data-sink device (3), the management means (9) 
are arranged to make available to the data-source device (4) the decoding information (DC1, 

30 DC2; DC1' DC2') that was previously made available to the data-sink device (3) and to 

withdraw the availability of the decoding information (DC1, DC2; DCV DC2 1 ) to the data- 
sink device (3). 
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12. A device (2) as claimed in claim 11, wherein the management means (9) are, 

in addition, arranged to take account of second relationship information (RI2) by means of 
which a relationship between a user (7) of the data-source device (4) and a user (6) of the 
data-sink device (3) can be defined, and wherein the management means (9) are arranged, as 
5 a function of the relationship defined by the second relationship information (RI2), to enable 
the termination of the availability of the digital data (Dl, D2; Dl' D2') to the data-sink device 
(3) to take place either only at the instigation of the user (6) of the data-sink device (3) or at 
the instigation of the user (7) of the data-source device (4) as well. 

10 13. A data-sink device (3) for using digital data, which digital data (Dl, D2; Dl 1 

D2') is available in encoded form, which digital data (Dl, D2; Dl 1 D2 f ) can be made 
accessible by a data-source device (4) to the data-sink device (3) and which digital data (Dl, 
D2; Dl f D2 f ) has associated with it blocking information (BL1, BL2; BL1', BL2 f ) by means 
of which any making available of the digital data pi, D2; Dl* D2 1 ) by the data-sink device 

15 (3) to a further data-sink device can be blocked, wherein first processing means (16) are 

provided that are arranged to process the digital data (Dl, D2; Dl 1 D2 1 ) by taking account of 
a first enabling signal (ESI) able to be fed to them, which first enabling signal (ESI) enables 
the digital data (Dl, D2; Dl 1 D2*) to be processed by the first processing means, and by using 
decoding information (DC1, DC2; DC1 1 DC2 1 ), which decoding information (DG1, DC2; 

20 DOr DC2 f ) is associated with the digital data (Dl, D2; Dl' D2') and the digital data (Dl, D2; 
Dl f D2 f ) can be decoded by means thereof, wherein first checking means (15) are provided 
that are arranged firstly to cooperate with a device (2) as claimed in any of claims 7 to 12, 
that are arranged secondly to check whether authorization-to-use information (BBI1, BBI2; 
BBI1\ BBI2 1 ) is available for the data-sink device (3), which authorization-to-use 

25 information (BBI1, BBI2; BBI1\ BBI2 1 ) exists separately from the digital data (Dl, D2; Dl' 
D2 1 ), is intended for authorizing the use of the digital data (Dl, D2; Dl' D2') by the data-sink 
device (3), comprises at least the blocking information (BL1, BL2; BL1 ! , BL2 1 ) and the 
decoding information (DC1, DC2; DC1 1 DC2 1 ) and is available to the data-source device (4) 
before it is made available to the data-sink device (3), and that are arranged thirdly to 

30 generate the first enabling signal (ESI) and transmit the first enabling signal (ESI) to the 

processing means (16) when there is a positive result to the check, and wherein first blocking 
means (18) are provided that, by taking account of the blocking information (BL1, BL2; 
BL1 ? , BL2*), are arranged to block any making available of the digital data (Dl, D2; Dl 1 D2 f ) 
to a further data-sink device. 
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14. - A data-sink device (3) as claimed in claim 13, which data-sink device (3) 

contains a device (2) as claimed in any of claims 7 to 12. 

5 15. A data-source device (4) for making digital data (Dl, D2; Dl' D2') available to 

a data-sink device (3), which digital data (Dl, D2; Dl 1 D2 f ) is available in encoded form and 
which digital data (Dl, D2; Dl' D2 ! ) has associated with it blocking information (BL1, BL2; 
BL1\ BL2 1 ) by means of which any making available of the digital data (Dl, D2; Dl 1 D2') by 
the data-sink device (3) to a further data-sink device (3) can be blocked, wherein second 

10 processing means (22) are provided that are arranged to process the digital data (Dl, D2; DT 
D2 ? ) by taking account of a second enabling signal (ES2) able to be fed to them, which 
second enabling signal (ES2) enables the digital data (Dl, D2; Dl' D2 ! ) to be processed by . 
the second processing means (22), and by using decoding information (DC1, DC2; DCl 1 
DC2'), which decoding information (DCl, DC2; DCl' DC2 1 ) is associated with the digital 

1 5 data (Dl, D2; Dl 1 D2') and the digital data (Dl, D2; Dl" D2*) can be decoded by means 
thereof, and wherein second checking means (21) are provided that are arranged firstly to 
cooperate with a device (2) as claimed in any of claims 7 to 12, that are arranged secondly to 
check whether decoding information (DCl, DC2; DCl 1 DC2 1 ) is available for the data-source 
. device (4), and that are arranged thirdly to generate the second enabling signal (ES2) and 

20 transmit the second enabling signal (ES2) to the second processing means (22) when there is 
a positive result to the check. 

16. A data-source device (4) as claimed in claim 15, which data-source device (4) 
contains a device (2) as claimed in any of claims 7 to 12. 

25 

17. A combination device (24, 25) having a data-source device and a data-sink 
device, which combination device (24, 25) contains a data-source device (4) as claimed in 
either of claims 13 and 14 and a data-sink device (3) as claimed in either of claims 15 and 16. 



